A workflow step can be marked as requiring sign-off before it proceeds — a refund over a threshold, a message going out to a customer list, a change to a live workflow. The run pauses and waits for a named approver rather than going ahead by default.
Constraints on what an agent or workflow is allowed to do are set once and enforced on every run — which tools it can call, what data it can touch, what actions need a human regardless of how confident the agent is.
Every edit to a workflow or policy is a versioned change with an author and a timestamp, not an in-place overwrite. Reviewing what changed between two versions is a diff, not a guess.
Governance is what makes it reasonable to let AgentOps agents make real decisions instead of only ever proposing them — the guardrails and approval points are the same regardless of whether a step ran automatically or an agent decided it. For access control and audit logging specifically, see Security.